MediaTek Becomes First Company in Taiwan to Complete Authoritative Global Information Security Assessment BSIMM

Company joins ranks as CNA member, demonstrating a dedication to product security

by Suman Gupta

HSINCHU, Taiwan – October 26, 2021 – MediaTek announced the successful implementation of the global software security model Building Security In Maturity Model (BSIMM12), making it the first company in Taiwan to be assessed using the authoritative security evaluation system. MediaTek has also been authorized by MITRE to assign Common Vulnerabilities and Exposures (CVE) as a CVE Numbering Authority (CNA). These international recognitions are an acknowledgment of MediaTek’s commitment to designing and providing secure, dependable and innovative products, and further demonstrates the company’s dedication to product security.

MediaTek supplies nearly two billion chips a year to global partners; creating secure products is part of its core mission. Security is considered throughout the development process, with control measures introduced through product requirements during the design, coding, testing and delivery process. By completing the BSIMM assessment, MediaTek has aligned itself with international standards, ensuring the security of the chip design and related software development process.

As a CNA member, MediaTek can now assign CVE security vulnerability IDs to the company’s products and can receive vulnerability alerts from information security experts from all over the world. MediaTek will continue to patch vulnerabilities and release security updates regularly in an open and transparent manner, remind customers to apply the updates and patches via direct alerts, security bulletin notifications and other methods, and provide users with secure and dependable solutions to protect their privacy. The company’s dedicated product security incidence response team (PSIRT) works closely with each business unit and collaborates with security experts from each product line to respond to and manage security vulnerabilities. MediaTek provides consumers with products that comply and surpass the latest security standards.

“MediaTek’s BSIMM assessment results and membership in the CNA program confirms our commitment to international standards of security management and technological capacity,” said Tiger Hsu, Product Security Officer at MediaTek. “MediaTek will continue to increase research, development and investment in product security as we enhance our product security management and our technological capacity, and aid customers when dealing with new security challenges.”

Learn more about the BSIMM: https://www.bsimm.com/

Learn more about the Common Vulnerabilities and Exposures (CVE) program: https://cve.mitre.org/

About MediaTek Inc.: MediaTek Incorporated (TWSE: 2454) is a global fabless semiconductor company that enables nearly 2 billion connected devices a year. We are a market leader in developing innovative systems-on-chip (SoC) for mobile device, home entertainment, connectivity and IoT products. Our dedication to innovation has positioned us as a driving market force in several key technology areas, including highly power-efficient mobile technologies, automotive solutions and a broad range of advanced multimedia products such as smartphones, tablets, digital televisions, 5G, Voice Assistant Devices (VAD) and wearables. MediaTek empowers and inspires people to expand their horizons and achieve their goals through smart technology, more easily and efficiently than ever before. We work with the brands you love to make great technology accessible to everyone, and it drives everything we do. Visit www.mediatek.com for more information.